CVE-2013-4306

Cross-site request forgery (CSRF) vulnerability in api/ApiQueryCheckUser.php in the CheckUser extension for MediaWiki, possibly Checkuser before 2.3, allows remote attackers to hijack the authentication of arbitrary users for requests that "perform sensitive write actions" via unspecified vectors.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-September/000133.html	Patch
http://osvdb.org/96908	Broken Link
http://seclists.org/oss-sec/2013/q3/553	Mailing List Third Party Advisory
http://www.securityfocus.com/bid/62210	Third Party Advisory VDB Entry
https://bugzilla.wikimedia.org/show_bug.cgi?id=45019	Issue Tracking Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/86893	VDB Entry
https://git.wikimedia.org/commit/mediawiki%2Fextensions%2FCheckUser.git/99ad25d066ce6111e798427cba7f21526827f651	Patch
http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-September/000133.html	Patch
http://osvdb.org/96908	Broken Link
http://seclists.org/oss-sec/2013/q3/553	Mailing List Third Party Advisory
http://www.securityfocus.com/bid/62210	Third Party Advisory VDB Entry
https://bugzilla.wikimedia.org/show_bug.cgi?id=45019	Issue Tracking Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/86893	VDB Entry
https://git.wikimedia.org/commit/mediawiki%2Fextensions%2FCheckUser.git/99ad25d066ce6111e798427cba7f21526827f651	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:mediawiki:mediawiki::::::::
	cpe:2.3:a:mediawiki:mediawiki::::::::
	cpe:2.3:a:mediawiki:mediawiki::::::::

History

No history.

Information

Published : 2013-10-11 21:55

Updated : 2025-04-11 00:51

NVD link : CVE-2013-4306

Mitre link : CVE-2013-4306

CVE.ORG link : CVE-2013-4306

JSON object : View

Products Affected

mediawiki

mediawiki

CWE

CWE-352

Cross-Site Request Forgery (CSRF)

{"id": "CVE-2013-4306", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2013-10-11T21:55:44.353", "references": [{"url": "http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-September/000133.html", "tags": ["Patch"], "source": "secalert@redhat.com"}, {"url": "http://osvdb.org/96908", "tags": ["Broken Link"], "source": "secalert@redhat.com"}, {"url": "http://seclists.org/oss-sec/2013/q3/553", "tags": ["Mailing List", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/62210", "tags": ["Third Party Advisory", "VDB Entry"], "source": "secalert@redhat.com"}, {"url": "https://bugzilla.wikimedia.org/show_bug.cgi?id=45019", "tags": ["Issue Tracking", "Patch"], "source": "secalert@redhat.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/86893", "tags": ["VDB Entry"], "source": "secalert@redhat.com"}, {"url": "https://git.wikimedia.org/commit/mediawiki%2Fextensions%2FCheckUser.git/99ad25d066ce6111e798427cba7f21526827f651", "tags": ["Patch"], "source": "secalert@redhat.com"}, {"url": "http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-September/000133.html", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/96908", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/oss-sec/2013/q3/553", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/62210", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://bugzilla.wikimedia.org/show_bug.cgi?id=45019", "tags": ["Issue Tracking", "Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/86893", "tags": ["VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://git.wikimedia.org/commit/mediawiki%2Fextensions%2FCheckUser.git/99ad25d066ce6111e798427cba7f21526827f651", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-352"}]}], "descriptions": [{"lang": "en", "value": "Cross-site request forgery (CSRF) vulnerability in api/ApiQueryCheckUser.php in the CheckUser extension for MediaWiki, possibly Checkuser before 2.3, allows remote attackers to hijack the authentication of arbitrary users for requests that \"perform sensitive write actions\" via unspecified vectors."}, {"lang": "es", "value": "Vulnerabilidad cross-site request forgery (CSRF) en api/ApiQueryCheckUser.php en la extensi\u00f3n CheckUser para MediaWiki, posiblemente CheckUser anteriores a 2.3, permite a atacantes remotos secuestrar la autenticaci\u00f3n de usuarios de forma arbitraria para peticiones que \"realizan acciones de escritura sensibles\" a trav\u00e9s de vectores no especificados."}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "079904A7-7992-48C6-9C50-54892F24826C", "versionEndExcluding": "1.19.8", "versionStartIncluding": "1.19.0"}, {"criteria": "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B32E340B-5FF7-43F7-A1E8-16CACE765F31", "versionEndExcluding": "1.20.7", "versionStartIncluding": "1.20.0"}, {"criteria": "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "967C4E11-A76A-4519-950D-D580C31AFB2C", "versionEndExcluding": "1.21.2", "versionStartIncluding": "1.21.0"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}